AnalogX Server Subject to Buffer Overflow - 31 Dec 1999

 
Analog-X Subject to Buffer Overflow
Reported December 31, 1999 by USSRLabs

DESCRIPTION

UssrLabs found a Local / Remote Buffer overflow, The code that
handles GET commands has an unchecked buffer that will allow arbitrary code to run if the buffer becomes overflowed. An overflow takes place when approximately 1000 characters are sent to the server in conjunction with the HTTP GET command.

VENDOR RESPONSE

AnalogX has been made aware of this problem, however no response was known at the time of this writing.

CREDITS
Discovered by USSRLabs